install/mailsystem
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

install_postfix_advanced.sh: fix return code range of zen.spamhaus.org

Browse Source 
ZEN answers with 127.0.0.x, so the previous range 127.0.1.[2..99] (used by
DBL) never matched and the filter was without effect. Use 127.0.0.[2..11].
A range is still required: if Spamhaus blocks our queries, it answers with
error codes like 127.255.255.254, which must not reject mail.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
chris
2026-11-08 13:41:45 +01:00
co-authored by Claude Opus 5.5
parent ad4018eca3
commit 4f33f3d426
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
install_postfix_advanced.sh
+6 -1
View File
@@ -2548,7 +2548,12 @@ smtpd_client_restrictions =
reject_rhsbl_helo dbl.spamhaus.org=127.0.1.[2..99], reject_rhsbl_helo dbl.spamhaus.org=127.0.1.[2..99],
reject_rhsbl_reverse_client dbl.spamhaus.org=127.0.1.[2..99], reject_rhsbl_reverse_client dbl.spamhaus.org=127.0.1.[2..99],
reject_rhsbl_sender dbl.spamhaus.org=127.0.1.[2..99], reject_rhsbl_sender dbl.spamhaus.org=127.0.1.[2..99],
reject_rbl_client zen.spamhaus.org=127.0.1.[2..99], # Only reject on real listings. ZEN answers with 127.0.0.2 - 127.0.0.11,
# DBL with 127.0.1.2 - 127.0.1.99. Do NOT use these lists without a range:
# If Spamhaus blocks our queries, it answers every query with an error code
# like 127.255.255.254. Without a range, all mail would then be rejected.
#
reject_rbl_client zen.spamhaus.org=127.0.0.[2..11],
# Greylisting check # Greylisting check
# #